← Back

CVE-2013-2881

nvd nist
Published: Jul 31, 2013Modified: Apr 29, 2026

JSON object

Loading...
5.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:N
Exploitability: 8.6 / Impact: 4.9
Source: NVD

Description

Google Chrome before 28.0.1500.95 does not properly handle frames, which allows remote attackers to bypass the Same Origin Policy via a crafted web site.

Affected (70)

1 product
Chrome
1 product
Debian Linux
Configuration A
69 vulnerable
Vulnerable SoftwareAffected Versions
Google
Up to 28.0.1500.94
Version 28.0.1500.0
Version 28.0.1500.10
Version 28.0.1500.11
Version 28.0.1500.12
Version 28.0.1500.13
Version 28.0.1500.14
Version 28.0.1500.15
Version 28.0.1500.16
Version 28.0.1500.17
Version 28.0.1500.18
Version 28.0.1500.19
Version 28.0.1500.20
Version 28.0.1500.21
Version 28.0.1500.22
Version 28.0.1500.23
Version 28.0.1500.24
Version 28.0.1500.25
Version 28.0.1500.26
Version 28.0.1500.27
Version 28.0.1500.28
Version 28.0.1500.29
Version 28.0.1500.2
Version 28.0.1500.31
Version 28.0.1500.32
Version 28.0.1500.33
Version 28.0.1500.34
Version 28.0.1500.35
Version 28.0.1500.36
Version 28.0.1500.37
Version 28.0.1500.38
Version 28.0.1500.39
Version 28.0.1500.3
Version 28.0.1500.40
Version 28.0.1500.41
Version 28.0.1500.42
Version 28.0.1500.43
Version 28.0.1500.44
Version 28.0.1500.45
Version 28.0.1500.46
Version 28.0.1500.47
Version 28.0.1500.48
Version 28.0.1500.49
Version 28.0.1500.4
Version 28.0.1500.50
Version 28.0.1500.51
Version 28.0.1500.52
Version 28.0.1500.53
Version 28.0.1500.54
Version 28.0.1500.56
Version 28.0.1500.58
Version 28.0.1500.59
Version 28.0.1500.5
Version 28.0.1500.60
Version 28.0.1500.61
Version 28.0.1500.62
Version 28.0.1500.63
Version 28.0.1500.64
Version 28.0.1500.66
Version 28.0.1500.68
Version 28.0.1500.6
Version 28.0.1500.70
Version 28.0.1500.71
Version 28.0.1500.72
Version 28.0.1500.89
Version 28.0.1500.8
Version 28.0.1500.91
Version 28.0.1500.93
Version 28.0.1500.9
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Version 7.0

Related CWEs

Timeline

No history available yet.